Bulz.60466 removal guide

The Bulz.60466 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.60466 virus can do?

Executable code extraction
Creates RWX memory
Attempts to connect to a dead IP:Port (13 unique times)
Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Uses Windows utilities for basic functionality
Creates a hidden or system file
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

www.bing.com

assets.onestore.ms

statics-marketingsites-wcus-ms-com.akamaized.net

ajax.aspnetcdn.com

mem.gfx.ms

js.monitor.azure.com

smplus-prod-frontdoor.azurefd.net

ocsp.digicert.com

cacerts.digicert.com

img-prod-cms-rt-microsoft-com.akamaized.net

How to determine Bulz.60466?


File Info:
crc32: 3BD7DC8D
md5: 067c4e46aaa2207a9035053331b76d38
name: 067C4E46AAA2207A9035053331B76D38.mlw
sha1: ab69ee698162878991e6f1b0e93f053579f29296
sha256: e52705386ad0dbcca9861d422254d4910ae15e3d475bbaf573bb28887d220482
sha512: 1daae433d0be1df627b51ab0c2a70a99575e9351466702db57b7fd874475a1c44fb157d29797c37e3cc1053f8c16b838610dccd3e79192e0cad54e502d024076
ssdeep: 24576:z7blIar6REw7uxHYn/tkdyyPnpo5lzjB1oxq67aRq8Imj4Y3:z75/mEAem/t7Snpo5lzj6p+sm8Y3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName: Nate Woolls                                                 
Comments: This installation was built with Inno Setup.
ProductName: MultiMiner                                                  
ProductVersion: 4.3.0                                             
FileDescription: MultiMiner Setup                                            
Translation: 0x0000 0x04b0

Bulz.60466 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Unwanted-Program ( 004bf75d1 )
Lionic	Trojan.Win32.MultiMiner.4!c
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Bulz.60466
Cylance	Unsafe
Sangfor	CoinMiner.Win32.Agent.mt
Alibaba	Trojan:Win32/CoinMiner.e60030dd
K7GW	Unwanted-Program ( 004bf75d1 )
Cybereason	malicious.6aaa22
Cyren	W32/Application.LHYR-8115
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/MultiMiner.B potentially unsafe
APEX	Malicious
Avast	Win32:MultiMiner-E [Miner]
Kaspersky	HEUR:Trojan.Win32.Convagent.gen
BitDefender	Gen:Variant.Bulz.60466
NANO-Antivirus	Trojan.Win32.MultiMiner.iupehy
MicroWorld-eScan	Gen:Variant.Bulz.60466
Tencent	Win32.Trojan.Coinminer.Eym
Sophos	MultiMiner (PUA)
Comodo	Malware@#3aipt068b495j
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.AdwareFileTour.tc
FireEye	Gen:Variant.Bulz.60466
Emsisoft	Gen:Variant.Bulz.60466 (B)
Webroot	W32.Trojan.Miner
Avira	PUA/CoinMiner.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.2FEA1D3
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	PUA:Win32/CoinMiner
Gridinsoft	Trojan.Win32.CoinMiner.dd!n
SUPERAntiSpyware	Hack.Tool/Gen-BitCoinMiner
GData	MSIL.Application.CoinMiner.V@gen (4x)
McAfee	Artemis!067C4E46AAA2
MAX	malware (ai score=83)
VBA32	Trojan.CoinMiner
Panda	Trj/CI.A
MaxSecure	Trojan.Malware.102607949.susgen
Fortinet	Adware/MultiMiner
AVG	Win32:MultiMiner-E [Miner]
Paloalto	generic.ml
Qihoo-360	Win32/Miner.Coinminer.HgIASOoA

How to remove Bulz.60466?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.